+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: How would I go about defacing this site? (/showthread.php?tid=4844395)
Pages: Pages
1
2
How would I go about defacing this site? - mdt3ch - May 31, 2015
I have read about xss, rfi, fli, and sqli for website defacing.
However, I want to learn how to analyze a site and figure out the way to deface it
,case in point
sscrmnl.edu.ph
All the other tuts teach you how to search in Google dorks for sites. I want to pick the site and find angles to approach after analyzing how to deface it. Any help will be much appreciated.
* - Jason Stattham - May 31, 2015
It's a .edu site, better keep off your hands before the feds knock at your door.
* - x4151rch - Jun 1, 2015
Pinoy ka rin ba? Pm me, we will discuss things in private. :)
* - srry20wnu - Jun 1, 2015
(Jun 1, 2015 06:57 AM)x4151rch Wrote: Pinoy ka rin ba? Pm me, we will discuss things in private. :)
Yeah, get some uneducated kid arrested. Cool. 😠
* - Abhax - Jun 1, 2015
I wouldn't recommend defacing a .edu site, If you do you're going to have a bad time.
* - x4151rch - Jun 1, 2015
(Jun 1, 2015 09:12 AM)srry20wnu Wrote: Yeah, get some uneducated kid arrested. Cool. 😠
I'm also with you guys, I also don't recommend defacing (I have several shelled sites, on different servers,and none of them were defaced), especially on a .edu site 🙃. I just actually want to discuss some things with him as his target was the site of the school where I also attended 😉
* - Gee4rce - Jun 2, 2015
I could help OP out by linking him to what he is looking for, but i won't.
Reason: i don't like the idea of random defacements.
I wish OP no good luck with this, Bye.
* - R00t M4st3r - Jun 2, 2015
sscrmnl.edu.ph/?s=<try different xss vulnerability> Scan with acunetix for a list of known vulns.
* - D3xH3x - Jun 2, 2015
(Jun 2, 2015 02:13 AM)Gee4rce Wrote: I could help OP out by linking him to what he is looking for, but i won't.
Reason: i don't like the idea of random defacements.
I wish OP no good luck with this, Bye.
Indeed. Why not try your new skills out on DVWA
* - WubCannon - Jun 2, 2015
(Jun 2, 2015 02:02 PM)R00t M4st3r Wrote: sscrmnl.edu.ph/?s=<try different xss vulnerability> Scan with acunetix for a list of known vulns.
wow, pls tech me ur ways mastur hecker
* - Th3PonyWizard - Jun 3, 2015
(Jun 2, 2015 02:02 PM)R00t M4st3r Wrote: sscrmnl.edu.ph/?s=<try different xss vulnerability> Scan with acunetix for a list of known vulns.every time acunetix is recommended another kitten commits suicide
* - R00t M4st3r - Jun 3, 2015
(Jun 3, 2015 12:52 AM)Th3PonyWizard Wrote: every time acunetix is recommended another kitten commits suicide
Although I agree sometimes Acunetix is not the best vulnerability scanner out there. However, it does pick up a good majority of corrupt code. You also have to worry about Acunetix reporting false positives. However, Acunetix is a fairly good web scanner out there to gather information on a target. They have default presets, you may need to enter your own code.
* - UnParad0x - Jun 3, 2015
.edu = jail time plus being monitored and logged for the rest of your life
* - R00t M4st3r - Jun 3, 2015
(May 31, 2015 08:22 AM)mdt3ch Wrote: I have read about xss, rfi, fli, and sqli for website defacing.
However, I want to learn how to analyze a site and figure out the way to deface it
,case in point
sscrmnl.edu.ph
All the other tuts teach you how to search in Google dorks for sites. I want to pick the site and find angles to approach after analyzing how to deface it. Any help will be much appreciated.
Try some of these tools:
mediafire.com/folder/yb3fy22w4dvrr/Security_Tools
Site Admin Login:
sscrmnl.edu.ph/wp-login.php?redirect_to=http%3A%2F%2Fsscrmnl.edu.ph%2Fwp-admin%2F&reauth=1
* - WubCannon - Jun 3, 2015
(Jun 3, 2015 12:31 PM)R00t M4st3r Wrote: Although I agree sometimes Acunetix is not the best vulnerability scanner out there. However, it does pick up a good majority of corrupt code. You also have to worry about Acunetix reporting false positives. However, Acunetix is a fairly good web scanner out there to gather information on a target. They have default presets, you may need to enter your own code.
It also stands out like a clown in a synagogue in webserver logs. Its pretty much the best way to get the server admins attention aside from sending him an email saying "hai can i heck ur server pl0x"